3rd gen vs 10th gen - Intel ME

[initialize]

Below you can find an update regarding Purism Librem on Intel ME topic. I would be pleased about a neutral evaluation in terms of security.

@uman

me_cleaner works up to Kabylake - I’m not aware of anything that will work on WhiskeyLake. Yet another reason not to rush for the latest hardware. That said, Purism offer a 14 with CometLake and claim that the IME is disabled. AS they did for the 13, and that had WhiskeyLake. I had a quick check on github and don’t see anything on how they did this.

https://forum.qubes-os.org/t/kill-intel-me-whisky-lake/7903/5

@MrChromebox

no, I set it [addition: HAP bit] manually with a hex editor. ME cleaner hasn’t been used in years now. Also, Purism now self-hosts all the blobs needed for building a full coreboot image, so we don’t modify anything at compile time - the blobs in our repo are already modified.

https://forums.puri.sm/t/me-cleaner-and-new-cpus/13003/5?u=snow